CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, terraform-provider-sendgrid-fips, gitlab-rails-ce-fips, nrdot-collector-k8s, jfrog-cli, agentbeat-fips, grafana-pyroscope, kuberay-operator-fips, cis-operator, nats-top, rancher-pushprox, virt-controller-fips, argo-rollouts,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid-fips, nrdot-collector-k8s, virt-controller-fips, k8s-metacollector-fips, seaweedfs, opentelemetry-operator, docker-cli-buildx-fips, db-operator, flux-source-watcher, kubescape-server, azurefile-csi, external-secrets-operator-fips, vexctl,...

OPENSUSE-SU-2026:10486-1 amazon-ssm-agent-3.3.4121.0-1.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.4121.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: amazon-ssm-agent

Issue Overview: cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected code execution when invoking toolchain CVE-2025-68119 Affected Packages: amazon-ssm-agent Issue Correction: Run dnf update amazon-ssm-agent --releasever 2023.10.20260330 or d...

Important: amazon-ssm-agent

Issue Overview: cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected code execution when invoking toolchain CVE-2025-68119 Affected Packages: amazon-ssm-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2026-3207 (ALAS-2026-3207)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3883.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3207 advisory. cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected...

openSUSE 16 Security Update : amazon-ssm-agent (openSUSE-SU-2026:20351-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20351-1 advisory. - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611. Tenab...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20351-1 Rating: important References: bsc1253611 Cross-References: CVE-2025-47913 CVSS scores: CVE-2025-47913 SUSE : 7.5...

OPENSUSE-SU-2026:20351-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: rancher-fleet, crossplane-provider-aws-lambda-fips, vault-fips, buildkitd, gitlab-rails-ce-fips, crossplane-provider-aws-kms-fips, trivy-operator, argo-rollouts, crossplane-provider-aws-elasticache-fips, crossplane-provider-azure-authorization, kyverno-notation-aws,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: rancher-fleet, crossplane-provider-aws-lambda-fips, vault-fips, buildkitd, gitlab-rails-ce-fips, crossplane-provider-aws-kms-fips, trivy-operator, argo-rollouts, crossplane-provider-aws-elasticache-fips, crossplane-provider-azure-authorization, kyverno-notation-aws,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, gitlab-rails-ce-fips, trivy-operator, kubevela-fips, gptscript, zot, kubescape, pulumi-language-dotnet, dagger, amazon-ssm-agent, flux-fips, trivy, flux-source-controller, grype-fips, flux-source-watcher, nemo, gitsign, tekton-pipelines-fips,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: google-osconfig-agent, gitlab-rails-ce-fips, trivy-operator, kubevela-fips, gptscript, zot, kubescape, pulumi-language-dotnet, dagger, amazon-ssm-agent, flux-fips, trivy, flux-source-controller, grype-fips, flux-source-watcher, nemo, gitsign, tekton-pipelines-fips,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, xcover, terraform-provider-sendgrid-fips, gitlab-rails-ce-fips, helm-docs, nrdot-collector-k8s, agentbeat-fips, grafana-pyroscope, nats-top, cis-operator, gogatekeeper, argo-rollouts, kubernetes-csi-external-attacher,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: prometheus-elasticsearch-exporter-fips, xcover, terraform-provider-sendgrid-fips, gitlab-rails-ce-fips, helm-docs, nrdot-collector-k8s, agentbeat-fips, grafana-pyroscope, nats-top, cis-operator, gogatekeeper, argo-rollouts, kubernetes-csi-external-attacher,...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3121 (ALAS-2025-3121)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3572.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3121 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2025:4244-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4244-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

openSUSE Security Advisory (SUSE-SU-2025:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...